PyPI/gradio CVE-2024-1183: medium 6.5, EPSS 1.80%

gradio Server-Side Request Forgery vulnerability

Action: Upgrade gradio to 4.10.0 or later.

pip install gradio==4.10.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1419
• https://nvd.nist.gov/vuln/detail/CVE-2024-1183
• https://github.com/gradio-app/gradio/commit/2ad3d9e7ec6c8eeea59774265b44f11df7394bb4
• https://github.com/gradio-app/gradio/commit/7ba8c5da45b004edd12c0460be9222f5b5f5f055
• https://github.com/gradio-app/gradio
• https://huntr.com/bounties/103434f9-87d2-42ea-9907-194a3c25007c
• https://pypi.org/project/gradio
• https://github.com/advisories/GHSA-qh6x-j82h-vpf9

CVE-2024-1183 · published 2026-07-07T11:45:38.870824Z · modified 2026-07-07T17:47:40.923525092Z · JSON